Windows Installer runs when right clicking C:\ in My Computer

Just installed latest updates for SP2 in prep for SP3 install.
After the install, any time I right click on C:\ in My COmputer or Windows
Explorer, I get the windows Installer. "The feature you are trying to
install is on a CD-ROM or other removable disk that is not avaliable. Insert
the " disk and click OK. "Use Source" option box has then numeral 1 in it.
Clicking OK after clearing the Use Source box results in the right click
context menu coming up withj no apparent ill effects.

System information (complements of a previous encounter with Mr. Stanley :-) )
Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack 2
Dell DImension 4500, Intel processor
Microsoft Genuine Advantage Diagnostic Results ALL Passed
MGA Diagnostics Report
Diagnostic Report (1.9.0019.0):
-----------------------------------------
WGA Data-->
Validation Status: Genuine
Validation Code: 0

Cached Validation Code: N/A
Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG
Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w=
Windows Product ID: 55277-OEM-2141875-62038
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 5.1.2600.2.00010300.2.0.hom
ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3)
Is Admin: Yes
TestCab: 0x0
WGA Version: Registered, 1.9.9.1
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-230-1
Resolution Status: N/A

WgaER Data-->
ThreatID(s): N/A
Version: N/A

WGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Edition 2003 - 100 Genuine
OGA Version: Registered, 2.0.48.0
Signed By: Microsoft
Office Diagnostics:
77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details:
<GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel
Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2"
minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell System,Dell
Computer,Dell System,Dell
System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
Standard
Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
Office Professional Edition
2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App
Id="15" Version="11" Result="100"/><App Id="16" Version="11"
Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19"
Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App
Id="1B" Version="11" Result="100"/><App Id="44" Version="11"
Result="100"/></Applications></Office></Software></GenuineResults>

Licensing Data-->
N/A

Windows Activation Technologies-->
N/A

HWID Data-->
N/A

OEM Activation 1.0 Data-->
BIOS string matches: yes
Marker string from BIOS: 145B4ell Inc|19CC0:GENUINE C&C
INC|145B4:Microsoft Corporation
Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell System,Dell
System

OEM Activation 2.0 Data-->
N/A

Correction- clicking CANCEL brings up the context menu. CLicking OK
generates File Not Found.

"Dellphinus" wrote:

> Just installed latest updates for SP2 in prep for SP3 install.
> After the install, any time I right click on C:\ in My COmputer or Windows
> Explorer, I get the windows Installer. "The feature you are trying to
> install is on a CD-ROM or other removable disk that is not avaliable. Insert
> the " disk and click OK. "Use Source" option box has then numeral 1 in it.
> Clicking OK after clearing the Use Source box results in the right click
> context menu coming up withj no apparent ill effects.
>
> System information (complements of a previous encounter with Mr. Stanley :-) )
> Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack 2
> Dell DImension 4500, Intel processor
> Microsoft Genuine Advantage Diagnostic Results ALL Passed
> MGA Diagnostics Report
> Diagnostic Report (1.9.0019.0):
> -----------------------------------------
> WGA Data-->
> Validation Status: Genuine
> Validation Code: 0
>
> Cached Validation Code: N/A
> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG
> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w=
> Windows Product ID: 55277-OEM-2141875-62038
> Windows Product ID Type: 3
> Windows License Type: OEM System Builder
> Windows OS version: 5.1.2600.2.00010300.2.0.hom
> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3)
> Is Admin: Yes
> TestCab: 0x0
> WGA Version: Registered, 1.9.9.1
> Signed By: Microsoft
> Product Name: N/A
> Architecture: N/A
> Build lab: N/A
> TTS Error: N/A
> Validation Diagnostic: 025D1FF3-230-1
> Resolution Status: N/A
>
> WgaER Data-->
> ThreatID(s): N/A
> Version: N/A
>
> WGA Notifications Data-->
> Cached Result: N/A, hr = 0x80070002
> File Exists: No
> Version: N/A, hr = 0x80070002
> WgaTray.exe Signed By: N/A, hr = 0x80070002
> WgaLogon.dll Signed By: N/A, hr = 0x80070002
>
> OGA Notifications Data-->
> Cached Result: N/A, hr = 0x80070002
> Version: N/A, hr = 0x80070002
> OGAExec.exe Signed By: N/A, hr = 0x80070002
> OGAAddin.dll Signed By: N/A, hr = 0x80070002
>
> OGA Data-->
> Office Status: 100 Genuine
> Microsoft Office Professional Edition 2003 - 100 Genuine
> OGA Version: Registered, 2.0.48.0
> Signed By: Microsoft
> Office Diagnostics:
> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
>
> Browser Data-->
> Proxy settings: N/A
> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
> Download signed ActiveX controls: Prompt
> Download unsigned ActiveX controls: Disabled
> Run ActiveX controls and plug-ins: Allowed
> Initialize and script ActiveX controls not marked as safe: Disabled
> Allow scripting of Internet Explorer Webbrowser control: Disabled
> Active scripting: Allowed
> Script ActiveX controls marked as safe for scripting: Allowed
>
> File Scan Data-->
>
> Other data-->
> Office Details:
> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel
> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2"
> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell System,Dell
> Computer,Dell System,Dell
> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
> Standard
> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
> Office Professional Edition
> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App
> Id="15" Version="11" Result="100"/><App Id="16" Version="11"
> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19"
> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App
> Id="1B" Version="11" Result="100"/><App Id="44" Version="11"
> Result="100"/></Applications></Office></Software></GenuineResults>
>
> Licensing Data-->
> N/A
>
> Windows Activation Technologies-->
> N/A
>
> HWID Data-->
> N/A
>
> OEM Activation 1.0 Data-->
> BIOS string matches: yes
> Marker string from BIOS: 145B4ell Inc|19CC0:GENUINE C&C
> INC|145B4:Microsoft Corporation
> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell System,Dell
> System
>
> OEM Activation 2.0 Data-->
> N/A
>
>

See...

Help: I Got Hacked. Now What Do I Do?
http://technet.microsoft.com/en-us/l.../cc700813.aspx

Back-up any personal data (none of which should be considered 100%
trustworthy at this point) then format the HDD & do a clean install of
Windows. Please note that a Repair Install (AKA in-place upgrade) will NOT
fix this!

HOW TO do a clean install of WinXP: See
http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 in
http://support.microsoft.com/kb/978307

After the clean install, you'll have the equivalent of a "new computer" so
take care of everything on the following page before otherwise connecting
the machine to the internet or a local network (i.e., other computers) and
before using a flash drive or SDCard that isn't brand-new or hasn't been
freshly formatted:

4 steps to help protect your new computer before you go online
http://www.microsoft.com/security/pypc.aspx

Other helpful references include:

HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
(after a clean install)
http://groups.google.com/group/micro...5afa8ed33e121c

HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
clean install)
http://groups.google.com/group/micro...66ae41add7dd2b

Tip: After getting the computer fully-patched, download/install KB971029
manually: http://support.microsoft.com/kb/971029

NB: Any Norton or McAfee free-trial that came preinstalled on the computer
when you bought it will be reinstalled (but invalid) when Windows is
reinstalled. You MUST uninstall the free-trial and download/run the
appropriate removal tool before installing any updates, Windows Service
Packs or IE upgrades and before installing your new anti-virus application
(which will require WinXP SP3 to be installed).

Norton Removal Tool
ftp://ftp.symantec.com/public/englis...moval_Tool.exe

McAfee Consumer Products Removal Tool
http://download.mcafee.com/products/...tches/MCPR.exe

Also see:

Steps To Help Prevent Spyware
http://www.microsoft.com/security/spyware/prevent.aspx

Steps to Help Prevent Computer Worms
http://www.microsoft.com/security/worms/prevent.aspx

Avoid Rogue Security Software!
http://www.microsoft.com/security/antivirus/rogue.aspx

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


Dellphinus wrote:
> Correction- clicking CANCEL brings up the context menu. CLicking OK
> generates File Not Found.
>
> "Dellphinus" wrote:
>
>> Just installed latest updates for SP2 in prep for SP3 install.
>> After the install, any time I right click on C:\ in My COmputer or
>> Windows
>> Explorer, I get the windows Installer. "The feature you are trying to
>> install is on a CD-ROM or other removable disk that is not avaliable.
>> Insert the " disk and click OK. "Use Source" option box has then numeral
>> 1 in it. Clicking OK after clearing the Use Source box results in the
>> right click context menu coming up withj no apparent ill effects.
>>
>> System information (complements of a previous encounter with Mr. Stanley
>> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack 2
>> Dell DImension 4500, Intel processor
>> Microsoft Genuine Advantage Diagnostic Results ALL Passed
>> MGA Diagnostics Report
>> Diagnostic Report (1.9.0019.0):
>> -----------------------------------------
>> WGA Data-->
>> Validation Status: Genuine
>> Validation Code: 0
>>
>> Cached Validation Code: N/A
>> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG
>> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w=
>> Windows Product ID: 55277-OEM-2141875-62038
>> Windows Product ID Type: 3
>> Windows License Type: OEM System Builder
>> Windows OS version: 5.1.2600.2.00010300.2.0.hom
>> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3)
>> Is Admin: Yes
>> TestCab: 0x0
>> WGA Version: Registered, 1.9.9.1
>> Signed By: Microsoft
>> Product Name: N/A
>> Architecture: N/A
>> Build lab: N/A
>> TTS Error: N/A
>> Validation Diagnostic: 025D1FF3-230-1
>> Resolution Status: N/A
>>
>> WgaER Data-->
>> ThreatID(s): N/A
>> Version: N/A
>>
>> WGA Notifications Data-->
>> Cached Result: N/A, hr = 0x80070002
>> File Exists: No
>> Version: N/A, hr = 0x80070002
>> WgaTray.exe Signed By: N/A, hr = 0x80070002
>> WgaLogon.dll Signed By: N/A, hr = 0x80070002
>>
>> OGA Notifications Data-->
>> Cached Result: N/A, hr = 0x80070002
>> Version: N/A, hr = 0x80070002
>> OGAExec.exe Signed By: N/A, hr = 0x80070002
>> OGAAddin.dll Signed By: N/A, hr = 0x80070002
>>
>> OGA Data-->
>> Office Status: 100 Genuine
>> Microsoft Office Professional Edition 2003 - 100 Genuine
>> OGA Version: Registered, 2.0.48.0
>> Signed By: Microsoft
>> Office Diagnostics:
>> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
>>
>> Browser Data-->
>> Proxy settings: N/A
>> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
>> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
>> Download signed ActiveX controls: Prompt
>> Download unsigned ActiveX controls: Disabled
>> Run ActiveX controls and plug-ins: Allowed
>> Initialize and script ActiveX controls not marked as safe: Disabled
>> Allow scripting of Internet Explorer Webbrowser control: Disabled
>> Active scripting: Allowed
>> Script ActiveX controls marked as safe for scripting: Allowed
>>
>> File Scan Data-->
>>
>> Other data-->
>> Office Details:
>> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel
>> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2"
>> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell
>> System,Dell
>> Computer,Dell System,Dell
>> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
>> Standard
>> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
>> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
>> Office Professional Edition
>> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App
>> Id="15" Version="11" Result="100"/><App Id="16" Version="11"
>> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19"
>> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App
>> Id="1B" Version="11" Result="100"/><App Id="44" Version="11"
>> Result="100"/></Applications></Office></Software></GenuineResults>
>>
>> Licensing Data-->
>> N/A
>>
>> Windows Activation Technologies-->
>> N/A
>>
>> HWID Data-->
>> N/A
>>
>> OEM Activation 1.0 Data-->
>> BIOS string matches: yes
>> Marker string from BIOS: 145B4ell Inc|19CC0:GENUINE C&C
>> INC|145B4:Microsoft Corporation
>> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell
>> System,Dell
>> System
>>
>> OEM Activation 2.0 Data-->
>> N/A

PA Bear,
Can you elaborate? This computer was just given a clean bill of health at
the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee
Enterprise.
What nastie does this?

"PA Bear [MS MVP]" wrote:

> See...
>
> Help: I Got Hacked. Now What Do I Do?
> http://technet.microsoft.com/en-us/l.../cc700813.aspx
>
> Back-up any personal data (none of which should be considered 100%
> trustworthy at this point) then format the HDD & do a clean install of
> Windows. Please note that a Repair Install (AKA in-place upgrade) will NOT
> fix this!
>
> HOW TO do a clean install of WinXP: See
> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 in
> http://support.microsoft.com/kb/978307
>
> After the clean install, you'll have the equivalent of a "new computer" so
> take care of everything on the following page before otherwise connecting
> the machine to the internet or a local network (i.e., other computers) and
> before using a flash drive or SDCard that isn't brand-new or hasn't been
> freshly formatted:
>
> 4 steps to help protect your new computer before you go online
> http://www.microsoft.com/security/pypc.aspx
>
> Other helpful references include:
>
> HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
> (after a clean install)
> http://groups.google.com/group/micro...5afa8ed33e121c
>
> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
> clean install)
> http://groups.google.com/group/micro...66ae41add7dd2b
>
> Tip: After getting the computer fully-patched, download/install KB971029
> manually: http://support.microsoft.com/kb/971029
>
> NB: Any Norton or McAfee free-trial that came preinstalled on the computer
> when you bought it will be reinstalled (but invalid) when Windows is
> reinstalled. You MUST uninstall the free-trial and download/run the
> appropriate removal tool before installing any updates, Windows Service
> Packs or IE upgrades and before installing your new anti-virus application
> (which will require WinXP SP3 to be installed).
>
> Norton Removal Tool
> ftp://ftp.symantec.com/public/englis...moval_Tool.exe
>
> McAfee Consumer Products Removal Tool
> http://download.mcafee.com/products/...tches/MCPR.exe
>
> Also see:
>
> Steps To Help Prevent Spyware
> http://www.microsoft.com/security/spyware/prevent.aspx
>
> Steps to Help Prevent Computer Worms
> http://www.microsoft.com/security/worms/prevent.aspx
>
> Avoid Rogue Security Software!
> http://www.microsoft.com/security/antivirus/rogue.aspx
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
>
>
> Dellphinus wrote:
> > Correction- clicking CANCEL brings up the context menu. CLicking OK
> > generates File Not Found.
> >
> > "Dellphinus" wrote:
> >
> >> Just installed latest updates for SP2 in prep for SP3 install.
> >> After the install, any time I right click on C:\ in My COmputer or
> >> Windows
> >> Explorer, I get the windows Installer. "The feature you are trying to
> >> install is on a CD-ROM or other removable disk that is not avaliable.
> >> Insert the " disk and click OK. "Use Source" option box has then numeral
> >> 1 in it. Clicking OK after clearing the Use Source box results in the
> >> right click context menu coming up withj no apparent ill effects.
> >>
> >> System information (complements of a previous encounter with Mr. Stanley
> >> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack 2
> >> Dell DImension 4500, Intel processor
> >> Microsoft Genuine Advantage Diagnostic Results ALL Passed
> >> MGA Diagnostics Report
> >> Diagnostic Report (1.9.0019.0):
> >> -----------------------------------------
> >> WGA Data-->
> >> Validation Status: Genuine
> >> Validation Code: 0
> >>
> >> Cached Validation Code: N/A
> >> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG
> >> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w=
> >> Windows Product ID: 55277-OEM-2141875-62038
> >> Windows Product ID Type: 3
> >> Windows License Type: OEM System Builder
> >> Windows OS version: 5.1.2600.2.00010300.2.0.hom
> >> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3)
> >> Is Admin: Yes
> >> TestCab: 0x0
> >> WGA Version: Registered, 1.9.9.1
> >> Signed By: Microsoft
> >> Product Name: N/A
> >> Architecture: N/A
> >> Build lab: N/A
> >> TTS Error: N/A
> >> Validation Diagnostic: 025D1FF3-230-1
> >> Resolution Status: N/A
> >>
> >> WgaER Data-->
> >> ThreatID(s): N/A
> >> Version: N/A
> >>
> >> WGA Notifications Data-->
> >> Cached Result: N/A, hr = 0x80070002
> >> File Exists: No
> >> Version: N/A, hr = 0x80070002
> >> WgaTray.exe Signed By: N/A, hr = 0x80070002
> >> WgaLogon.dll Signed By: N/A, hr = 0x80070002
> >>
> >> OGA Notifications Data-->
> >> Cached Result: N/A, hr = 0x80070002
> >> Version: N/A, hr = 0x80070002
> >> OGAExec.exe Signed By: N/A, hr = 0x80070002
> >> OGAAddin.dll Signed By: N/A, hr = 0x80070002
> >>
> >> OGA Data-->
> >> Office Status: 100 Genuine
> >> Microsoft Office Professional Edition 2003 - 100 Genuine
> >> OGA Version: Registered, 2.0.48.0
> >> Signed By: Microsoft
> >> Office Diagnostics:
> >> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
> >>
> >> Browser Data-->
> >> Proxy settings: N/A
> >> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
> >> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
> >> Download signed ActiveX controls: Prompt
> >> Download unsigned ActiveX controls: Disabled
> >> Run ActiveX controls and plug-ins: Allowed
> >> Initialize and script ActiveX controls not marked as safe: Disabled
> >> Allow scripting of Internet Explorer Webbrowser control: Disabled
> >> Active scripting: Allowed
> >> Script ActiveX controls marked as safe for scripting: Allowed
> >>
> >> File Scan Data-->
> >>
> >> Other data-->
> >> Office Details:
> >> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel
> >> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2"
> >> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell
> >> System,Dell
> >> Computer,Dell System,Dell
> >> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
> >> Standard
> >> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
> >> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
> >> Office Professional Edition
> >> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App
> >> Id="15" Version="11" Result="100"/><App Id="16" Version="11"
> >> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19"
> >> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App
> >> Id="1B" Version="11" Result="100"/><App Id="44" Version="11"
> >> Result="100"/></Applications></Office></Software></GenuineResults>
> >>
> >> Licensing Data-->
> >> N/A
> >>
> >> Windows Activation Technologies-->
> >> N/A
> >>
> >> HWID Data-->
> >> N/A
> >>
> >> OEM Activation 1.0 Data-->
> >> BIOS string matches: yes
> >> Marker string from BIOS: 145B4ell Inc|19CC0:GENUINE C&C
> >> INC|145B4:Microsoft Corporation
> >> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell
> >> System,Dell
> >> System
> >>
> >> OEM Activation 2.0 Data-->
> >> N/A
>
> .
>

Download and run this, full scan, and see what turns up.
http://www.malwarebytes.org/

I don't know from this "GeekstoGo", but I do know CrapAfee is one of the
worst AV out there.

--


"Don't pick a fight with an old man.
If he is too old to fight, he'll just kill you."


"Dellphinus" <Dellphinus@discussions.microsoft.com> wrote in message
news:34259E37-883E-4587-BB37-C0CFAB8A31AF@microsoft.com...
> PA Bear,
> Can you elaborate? This computer was just given a clean bill of health
> at
> the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee
> Enterprise.
> What nastie does this?
>
> "PA Bear [MS MVP]" wrote:
>
>> See...
>>
>> Help: I Got Hacked. Now What Do I Do?
>> http://technet.microsoft.com/en-us/l.../cc700813.aspx
>>
>> Back-up any personal data (none of which should be considered 100%
>> trustworthy at this point) then format the HDD & do a clean install of
>> Windows. Please note that a Repair Install (AKA in-place upgrade) will
>> NOT
>> fix this!
>>
>> HOW TO do a clean install of WinXP: See
>> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1
>> in
>> http://support.microsoft.com/kb/978307
>>
>> After the clean install, you'll have the equivalent of a "new computer"
>> so
>> take care of everything on the following page before otherwise connecting
>> the machine to the internet or a local network (i.e., other computers)
>> and
>> before using a flash drive or SDCard that isn't brand-new or hasn't been
>> freshly formatted:
>>
>> 4 steps to help protect your new computer before you go online
>> http://www.microsoft.com/security/pypc.aspx
>>
>> Other helpful references include:
>>
>> HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
>> (after a clean install)
>> http://groups.google.com/group/micro...5afa8ed33e121c
>>
>> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
>> clean install)
>> http://groups.google.com/group/micro...66ae41add7dd2b
>>
>> Tip: After getting the computer fully-patched, download/install KB971029
>> manually: http://support.microsoft.com/kb/971029
>>
>> NB: Any Norton or McAfee free-trial that came preinstalled on the
>> computer
>> when you bought it will be reinstalled (but invalid) when Windows is
>> reinstalled. You MUST uninstall the free-trial and download/run the
>> appropriate removal tool before installing any updates, Windows Service
>> Packs or IE upgrades and before installing your new anti-virus
>> application
>> (which will require WinXP SP3 to be installed).
>>
>> Norton Removal Tool
>>
>> ftp://ftp.symantec.com/public/englis...moval_Tool.exe
>>
>> McAfee Consumer Products Removal Tool
>>
>> http://download.mcafee.com/products/...tches/MCPR.exe
>>
>> Also see:
>>
>> Steps To Help Prevent Spyware
>> http://www.microsoft.com/security/spyware/prevent.aspx
>>
>> Steps to Help Prevent Computer Worms
>> http://www.microsoft.com/security/worms/prevent.aspx
>>
>> Avoid Rogue Security Software!
>> http://www.microsoft.com/security/antivirus/rogue.aspx
>>
>> If these procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
>> shop.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>
>>
>> Dellphinus wrote:
>> > Correction- clicking CANCEL brings up the context menu. CLicking OK
>> > generates File Not Found.
>> >
>> > "Dellphinus" wrote:
>> >
>> >> Just installed latest updates for SP2 in prep for SP3 install.
>> >> After the install, any time I right click on C:\ in My COmputer or
>> >> Windows
>> >> Explorer, I get the windows Installer. "The feature you are trying to
>> >> install is on a CD-ROM or other removable disk that is not avaliable.
>> >> Insert the " disk and click OK. "Use Source" option box has then
>> >> numeral
>> >> 1 in it. Clicking OK after clearing the Use Source box results in the
>> >> right click context menu coming up withj no apparent ill effects.
>> >>
>> >> System information (complements of a previous encounter with Mr.
>> >> Stanley
>> >> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service
>> >> Pack 2
>> >> Dell DImension 4500, Intel processor
>> >> Microsoft Genuine Advantage Diagnostic Results ALL Passed
>> >> MGA Diagnostics Report
>> >> Diagnostic Report (1.9.0019.0):
>> >> -----------------------------------------
>> >> WGA Data-->
>> >> Validation Status: Genuine
>> >> Validation Code: 0
>> >>
>> >> Cached Validation Code: N/A
>> >> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG
>> >> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w=
>> >> Windows Product ID: 55277-OEM-2141875-62038
>> >> Windows Product ID Type: 3
>> >> Windows License Type: OEM System Builder
>> >> Windows OS version: 5.1.2600.2.00010300.2.0.hom
>> >> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3)
>> >> Is Admin: Yes
>> >> TestCab: 0x0
>> >> WGA Version: Registered, 1.9.9.1
>> >> Signed By: Microsoft
>> >> Product Name: N/A
>> >> Architecture: N/A
>> >> Build lab: N/A
>> >> TTS Error: N/A
>> >> Validation Diagnostic: 025D1FF3-230-1
>> >> Resolution Status: N/A
>> >>
>> >> WgaER Data-->
>> >> ThreatID(s): N/A
>> >> Version: N/A
>> >>
>> >> WGA Notifications Data-->
>> >> Cached Result: N/A, hr = 0x80070002
>> >> File Exists: No
>> >> Version: N/A, hr = 0x80070002
>> >> WgaTray.exe Signed By: N/A, hr = 0x80070002
>> >> WgaLogon.dll Signed By: N/A, hr = 0x80070002
>> >>
>> >> OGA Notifications Data-->
>> >> Cached Result: N/A, hr = 0x80070002
>> >> Version: N/A, hr = 0x80070002
>> >> OGAExec.exe Signed By: N/A, hr = 0x80070002
>> >> OGAAddin.dll Signed By: N/A, hr = 0x80070002
>> >>
>> >> OGA Data-->
>> >> Office Status: 100 Genuine
>> >> Microsoft Office Professional Edition 2003 - 100 Genuine
>> >> OGA Version: Registered, 2.0.48.0
>> >> Signed By: Microsoft
>> >> Office Diagnostics:
>> >> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
>> >>
>> >> Browser Data-->
>> >> Proxy settings: N/A
>> >> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
>> >> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
>> >> Download signed ActiveX controls: Prompt
>> >> Download unsigned ActiveX controls: Disabled
>> >> Run ActiveX controls and plug-ins: Allowed
>> >> Initialize and script ActiveX controls not marked as safe: Disabled
>> >> Allow scripting of Internet Explorer Webbrowser control: Disabled
>> >> Active scripting: Allowed
>> >> Script ActiveX controls marked as safe for scripting: Allowed
>> >>
>> >> File Scan Data-->
>> >>
>> >> Other data-->
>> >> Office Details:
>> >> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel
>> >> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2"
>> >> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell
>> >> System,Dell
>> >> Computer,Dell System,Dell
>> >> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
>> >> Standard
>> >> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
>> >> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
>> >> Office Professional Edition
>> >> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App
>> >> Id="15" Version="11" Result="100"/><App Id="16" Version="11"
>> >> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19"
>> >> Version="11" Result="100"/><App Id="1A" Version="11"
>> >> Result="100"/><App
>> >> Id="1B" Version="11" Result="100"/><App Id="44" Version="11"
>> >> Result="100"/></Applications></Office></Software></GenuineResults>
>> >>
>> >> Licensing Data-->
>> >> N/A
>> >>
>> >> Windows Activation Technologies-->
>> >> N/A
>> >>
>> >> HWID Data-->
>> >> N/A
>> >>
>> >> OEM Activation 1.0 Data-->
>> >> BIOS string matches: yes
>> >> Marker string from BIOS: 145B4ell Inc|19CC0:GENUINE C&C
>> >> INC|145B4:Microsoft Corporation
>> >> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell
>> >> System,Dell
>> >> System
>> >>
>> >> OEM Activation 2.0 Data-->
>> >> N/A
>>
>> .
>>

GeekstoGo- think BleepingComputer. ANtimalware/Antispyware diagnosis/cleaning.
MBAM, SuperAntiSpyware, ESET, McAfee, RootRepeal, GMER, Kaspersky all came
up clean; I'm rerunning MBAM, SAS, Kaspersky, Rootrepeal and McAfee now.


"Michael" wrote:

> Download and run this, full scan, and see what turns up.
> http://www.malwarebytes.org/
>
> I don't know from this "GeekstoGo", but I do know CrapAfee is one of the
> worst AV out there.
>
> --
>
>
> "Don't pick a fight with an old man.
> If he is too old to fight, he'll just kill you."
>
>
>>

Some "thing" was installed that used Windows Installer for it's
installation and it left a temp link to an .msi on the C:\ drive.

Suggest you run the Windows Installer Cleanup Utility and see if it
offers to clean up which said "thing" was installed from a "CD-ROM or
other removable media" that used the msi installation process.

http://support.microsoft.com/kb/290301

If a "destructive" antivirus or security suite is installed (EX:
Norton/McAfee), then the phantom running of the .msi is most likely
directly related to it.


MowGreen
================
* -343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked




Dellphinus wrote:
> GeekstoGo- think BleepingComputer. ANtimalware/Antispyware diagnosis/cleaning.
> MBAM, SuperAntiSpyware, ESET, McAfee, RootRepeal, GMER, Kaspersky all came
> up clean; I'm rerunning MBAM, SAS, Kaspersky, Rootrepeal and McAfee now.
>
>
> "Michael" wrote:
>
>> Download and run this, full scan, and see what turns up.
>> http://www.malwarebytes.org/
>>
>> I don't know from this "GeekstoGo", but I do know CrapAfee is one of the
>> worst AV out there.
>>
>> --
>>
>>
>> "Don't pick a fight with an old man.
>> If he is too old to fight, he'll just kill you."
>>
>>
> >>

If you only just now got around to getting WinXP SP2 installed, you haven't
installed ANY critical security updates since October 2006 so there's no WAY
you could trust the security of the computer (or your data) now, despite
what anyone at GeekstoGo told you.

And there's no way any anti-virus application would be working on a WinXP
SP1 computer either.


Dellphinus wrote:
> PA Bear,
> Can you elaborate? This computer was just given a clean bill of health
> at
> the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee
> Enterprise.
> What nastie does this?
>
> "PA Bear [MS MVP]" wrote:
>> See...
>>
>> Help: I Got Hacked. Now What Do I Do?
>> http://technet.microsoft.com/en-us/l.../cc700813.aspx
>>
>> Back-up any personal data (none of which should be considered 100%
>> trustworthy at this point) then format the HDD & do a clean install of
>> Windows. Please note that a Repair Install (AKA in-place upgrade) will
>> NOT
>> fix this!
>>
>> HOW TO do a clean install of WinXP: See
>> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1
>> in
>> http://support.microsoft.com/kb/978307
>>
>> After the clean install, you'll have the equivalent of a "new computer"
>> so
>> take care of everything on the following page before otherwise connecting
>> the machine to the internet or a local network (i.e., other computers)
>> and
>> before using a flash drive or SDCard that isn't brand-new or hasn't been
>> freshly formatted:
>>
>> 4 steps to help protect your new computer before you go online
>> http://www.microsoft.com/security/pypc.aspx
>>
>> Other helpful references include:
>>
>> HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
>> (after a clean install)
>> http://groups.google.com/group/micro...5afa8ed33e121c
>>
>> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
>> clean install)
>> http://groups.google.com/group/micro...66ae41add7dd2b
>>
>> Tip: After getting the computer fully-patched, download/install KB971029
>> manually: http://support.microsoft.com/kb/971029
>>
>> NB: Any Norton or McAfee free-trial that came preinstalled on the
>> computer
>> when you bought it will be reinstalled (but invalid) when Windows is
>> reinstalled. You MUST uninstall the free-trial and download/run the
>> appropriate removal tool before installing any updates, Windows Service
>> Packs or IE upgrades and before installing your new anti-virus
>> application
>> (which will require WinXP SP3 to be installed).
>>
>> Norton Removal Tool
>>
>> ftp://ftp.symantec.com/public/englis...moval_Tool.exe
>>
>> McAfee Consumer Products Removal Tool
>>
>> http://download.mcafee.com/products/...tches/MCPR.exe
>>
>> Also see:
>>
>> Steps To Help Prevent Spyware
>> http://www.microsoft.com/security/spyware/prevent.aspx
>>
>> Steps to Help Prevent Computer Worms
>> http://www.microsoft.com/security/worms/prevent.aspx
>>
>> Avoid Rogue Security Software!
>> http://www.microsoft.com/security/antivirus/rogue.aspx
>>
>> If these procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
>> shop.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>
>>
>> Dellphinus wrote:
>>> Correction- clicking CANCEL brings up the context menu. CLicking OK
>>> generates File Not Found.
>>>
>>> "Dellphinus" wrote:
>>>
>>>> Just installed latest updates for SP2 in prep for SP3 install.
>>>> After the install, any time I right click on C:\ in My COmputer or
>>>> Windows
>>>> Explorer, I get the windows Installer. "The feature you are trying to
>>>> install is on a CD-ROM or other removable disk that is not avaliable.
>>>> Insert the " disk and click OK. "Use Source" option box has then
>>>> numeral
>>>> 1 in it. Clicking OK after clearing the Use Source box results in the
>>>> right click context menu coming up withj no apparent ill effects.
>>>>
>>>> System information (complements of a previous encounter with Mr.
>>>> Stanley
>>>> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack
>>>> 2
>>>> Dell DImension 4500, Intel processor
>>>> Microsoft Genuine Advantage Diagnostic Results ALL Passed
>>>> MGA Diagnostics Report
>>>> Diagnostic Report (1.9.0019.0):
>>>> -----------------------------------------
>>>> WGA Data-->
>>>> Validation Status: Genuine
>>>> Validation Code: 0
>>>>
>>>> Cached Validation Code: N/A
>>>> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG
>>>> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w=
>>>> Windows Product ID: 55277-OEM-2141875-62038
>>>> Windows Product ID Type: 3
>>>> Windows License Type: OEM System Builder
>>>> Windows OS version: 5.1.2600.2.00010300.2.0.hom
>>>> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3)
>>>> Is Admin: Yes
>>>> TestCab: 0x0
>>>> WGA Version: Registered, 1.9.9.1
>>>> Signed By: Microsoft
>>>> Product Name: N/A
>>>> Architecture: N/A
>>>> Build lab: N/A
>>>> TTS Error: N/A
>>>> Validation Diagnostic: 025D1FF3-230-1
>>>> Resolution Status: N/A
>>>>
>>>> WgaER Data-->
>>>> ThreatID(s): N/A
>>>> Version: N/A
>>>>
>>>> WGA Notifications Data-->
>>>> Cached Result: N/A, hr = 0x80070002
>>>> File Exists: No
>>>> Version: N/A, hr = 0x80070002
>>>> WgaTray.exe Signed By: N/A, hr = 0x80070002
>>>> WgaLogon.dll Signed By: N/A, hr = 0x80070002
>>>>
>>>> OGA Notifications Data-->
>>>> Cached Result: N/A, hr = 0x80070002
>>>> Version: N/A, hr = 0x80070002
>>>> OGAExec.exe Signed By: N/A, hr = 0x80070002
>>>> OGAAddin.dll Signed By: N/A, hr = 0x80070002
>>>>
>>>> OGA Data-->
>>>> Office Status: 100 Genuine
>>>> Microsoft Office Professional Edition 2003 - 100 Genuine
>>>> OGA Version: Registered, 2.0.48.0
>>>> Signed By: Microsoft
>>>> Office Diagnostics:
>>>> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
>>>>
>>>> Browser Data-->
>>>> Proxy settings: N/A
>>>> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
>>>> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
>>>> Download signed ActiveX controls: Prompt
>>>> Download unsigned ActiveX controls: Disabled
>>>> Run ActiveX controls and plug-ins: Allowed
>>>> Initialize and script ActiveX controls not marked as safe: Disabled
>>>> Allow scripting of Internet Explorer Webbrowser control: Disabled
>>>> Active scripting: Allowed
>>>> Script ActiveX controls marked as safe for scripting: Allowed
>>>>
>>>> File Scan Data-->
>>>>
>>>> Other data-->
>>>> Office Details:
>>>> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel
>>>> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2"
>>>> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell
>>>> System,Dell
>>>> Computer,Dell System,Dell
>>>> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
>>>> Standard
>>>> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
>>>> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
>>>> Office Professional Edition
>>>> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App
>>>> Id="15" Version="11" Result="100"/><App Id="16" Version="11"
>>>> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19"
>>>> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App
>>>> Id="1B" Version="11" Result="100"/><App Id="44" Version="11"
>>>> Result="100"/></Applications></Office></Software></GenuineResults>
>>>>
>>>> Licensing Data-->
>>>> N/A
>>>>
>>>> Windows Activation Technologies-->
>>>> N/A
>>>>
>>>> HWID Data-->
>>>> N/A
>>>>
>>>> OEM Activation 1.0 Data-->
>>>> BIOS string matches: yes
>>>> Marker string from BIOS: 145B4ell Inc|19CC0:GENUINE C&C
>>>> INC|145B4:Microsoft Corporation
>>>> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell
>>>> System,Dell
>>>> System
>>>>
>>>> OEM Activation 2.0 Data-->
>>>> N/A
>>
>> .

PA Bear,

Machine has had SP2 installed for a long time, I just installed the latest
updates to it (I think there was only one Security update outstanding on it).

"PA Bear [MS MVP]" wrote:

> If you only just now got around to getting WinXP SP2 installed, you haven't
> installed ANY critical security updates since October 2006 so there's no WAY
> you could trust the security of the computer (or your data) now, despite
> what anyone at GeekstoGo told you.
>
> And there's no way any anti-virus application would be working on a WinXP
> SP1 computer either.
>
>
> Dellphinus wrote:
> > PA Bear,
> > Can you elaborate? This computer was just given a clean bill of health
> > at
> > the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee
> > Enterprise.
> > What nastie does this?
> >
> > "PA Bear [MS MVP]" wrote:
> >> See...
> >>
> >> Help: I Got Hacked. Now What Do I Do?
> >> http://technet.microsoft.com/en-us/l.../cc700813.aspx
> >>
> >> Back-up any personal data (none of which should be considered 100%
> >> trustworthy at this point) then format the HDD & do a clean install of
> >> Windows. Please note that a Repair Install (AKA in-place upgrade) will
> >> NOT
> >> fix this!
> >>
> >> HOW TO do a clean install of WinXP: See
> >> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1
> >> in
> >> http://support.microsoft.com/kb/978307
> >>
> >> After the clean install, you'll have the equivalent of a "new computer"
> >> so
> >> take care of everything on the following page before otherwise connecting
> >> the machine to the internet or a local network (i.e., other computers)
> >> and
> >> before using a flash drive or SDCard that isn't brand-new or hasn't been
> >> freshly formatted:
> >>
> >> 4 steps to help protect your new computer before you go online
> >> http://www.microsoft.com/security/pypc.aspx
> >>
> >> Other helpful references include:
> >>
> >> HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
> >> (after a clean install)
> >> http://groups.google.com/group/micro...5afa8ed33e121c
> >>
> >> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
> >> clean install)
> >> http://groups.google.com/group/micro...66ae41add7dd2b
> >>
> >> Tip: After getting the computer fully-patched, download/install KB971029
> >> manually: http://support.microsoft.com/kb/971029
> >>
> >> NB: Any Norton or McAfee free-trial that came preinstalled on the
> >> computer
> >> when you bought it will be reinstalled (but invalid) when Windows is
> >> reinstalled. You MUST uninstall the free-trial and download/run the
> >> appropriate removal tool before installing any updates, Windows Service
> >> Packs or IE upgrades and before installing your new anti-virus
> >> application
> >> (which will require WinXP SP3 to be installed).
> >>
> >> Norton Removal Tool
> >>
> >> ftp://ftp.symantec.com/public/englis...moval_Tool.exe
> >>
> >> McAfee Consumer Products Removal Tool
> >>
> >> http://download.mcafee.com/products/...tches/MCPR.exe
> >>
> >> Also see:
> >>
> >> Steps To Help Prevent Spyware
> >> http://www.microsoft.com/security/spyware/prevent.aspx
> >>
> >> Steps to Help Prevent Computer Worms
> >> http://www.microsoft.com/security/worms/prevent.aspx
> >>
> >> Avoid Rogue Security Software!
> >> http://www.microsoft.com/security/antivirus/rogue.aspx
> >>
> >> If these procedures look too complex - and there is no shame in admitting
> >> this isn't your cup of tea - take the machine to a local, reputable and
> >> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
> >> shop.
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-IE, Mail, Security, Windows Client - since 2002
> >>
> >>
> >> Dellphinus wrote:
> >>> Correction- clicking CANCEL brings up the context menu. CLicking OK
> >>> generates File Not Found.
> >>>
> >>> "Dellphinus" wrote:
> >>>
> >>>> Just installed latest updates for SP2 in prep for SP3 install.
> >>>> After the install, any time I right click on C:\ in My COmputer or
> >>>> Windows
> >>>> Explorer, I get the windows Installer. "The feature you are trying to
> >>>> install is on a CD-ROM or other removable disk that is not avaliable.
> >>>> Insert the " disk and click OK. "Use Source" option box has then
> >>>> numeral
> >>>> 1 in it. Clicking OK after clearing the Use Source box results in the
> >>>> right click context menu coming up withj no apparent ill effects.
> >>>>
> >>>> System information (complements of a previous encounter with Mr.
> >>>> Stanley
> >>>> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack
> >>>> 2
> >>>> Dell DImension 4500, Intel processor
> >>>> Microsoft Genuine Advantage Diagnostic Results ALL Passed
> >>>> MGA Diagnostics Report
> >>>> Diagnostic Report (1.9.0019.0):
> >>>> -----------------------------------------
> >>>> WGA Data-->
> >>>> Validation Status: Genuine
> >>>> Validation Code: 0
> >>>>
> >>>> Cached Validation Code: N/A
> >>>> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG
> >>>> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w=
> >>>> Windows Product ID: 55277-OEM-2141875-62038
> >>>> Windows Product ID Type: 3
> >>>> Windows License Type: OEM System Builder
> >>>> Windows OS version: 5.1.2600.2.00010300.2.0.hom
> >>>> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3)
> >>>> Is Admin: Yes
> >>>> TestCab: 0x0
> >>>> WGA Version: Registered, 1.9.9.1
> >>>> Signed By: Microsoft
> >>>> Product Name: N/A
> >>>> Architecture: N/A
> >>>> Build lab: N/A
> >>>> TTS Error: N/A
> >>>> Validation Diagnostic: 025D1FF3-230-1
> >>>> Resolution Status: N/A
> >>>>
> >>>> WgaER Data-->
> >>>> ThreatID(s): N/A
> >>>> Version: N/A
> >>>>
> >>>> WGA Notifications Data-->
> >>>> Cached Result: N/A, hr = 0x80070002
> >>>> File Exists: No
> >>>> Version: N/A, hr = 0x80070002
> >>>> WgaTray.exe Signed By: N/A, hr = 0x80070002
> >>>> WgaLogon.dll Signed By: N/A, hr = 0x80070002
> >>>>
> >>>> OGA Notifications Data-->
> >>>> Cached Result: N/A, hr = 0x80070002
> >>>> Version: N/A, hr = 0x80070002
> >>>> OGAExec.exe Signed By: N/A, hr = 0x80070002
> >>>> OGAAddin.dll Signed By: N/A, hr = 0x80070002
> >>>>
> >>>> OGA Data-->
> >>>> Office Status: 100 Genuine
> >>>> Microsoft Office Professional Edition 2003 - 100 Genuine
> >>>> OGA Version: Registered, 2.0.48.0
> >>>> Signed By: Microsoft
> >>>> Office Diagnostics:
> >>>> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
> >>>>
> >>>> Browser Data-->
> >>>> Proxy settings: N/A
> >>>> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
> >>>> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
> >>>> Download signed ActiveX controls: Prompt
> >>>> Download unsigned ActiveX controls: Disabled
> >>>> Run ActiveX controls and plug-ins: Allowed
> >>>> Initialize and script ActiveX controls not marked as safe: Disabled
> >>>> Allow scripting of Internet Explorer Webbrowser control: Disabled
> >>>> Active scripting: Allowed
> >>>> Script ActiveX controls marked as safe for scripting: Allowed
> >>>>
> >>>> File Scan Data-->
> >>>>
> >>>> Other data-->
> >>>> Office Details:
> >>>> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel
> >>>> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2"
> >>>> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell
> >>>> System,Dell
> >>>> Computer,Dell System,Dell
> >>>> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
> >>>> Standard
> >>>> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
> >>>> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
> >>>> Office Professional Edition
> >>>> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App
> >>>> Id="15" Version="11" Result="100"/><App Id="16" Version="11"
> >>>> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19"
> >>>> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App
> >>>> Id="1B" Version="11" Result="100"/><App Id="44" Version="11"
> >>>> Result="100"/></Applications></Office></Software></GenuineResults>
> >>>>
> >>>> Licensing Data-->
> >>>> N/A
> >>>>
> >>>> Windows Activation Technologies-->
> >>>> N/A
> >>>>
> >>>> HWID Data-->
> >>>> N/A
> >>>>
> >>>> OEM Activation 1.0 Data-->
> >>>> BIOS string matches: yes
> >>>> Marker string from BIOS: 145B4ell Inc|19CC0:GENUINE C&C
> >>>> INC|145B4:Microsoft Corporation
> >>>> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell
> >>>> System,Dell
> >>>> System
> >>>>
> >>>> OEM Activation 2.0 Data-->
> >>>> N/A
> >>
> >> .
>
> .
>

Thanks for clarifying.

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)? Were any of these applications running
in the background when you attempted to install SP3?

Has a(another) Norton or McAfee application ever been installed on the
computer (e.g., a free-trial version that came preinstalled when you bought
it)?

How to troubleshoot an unsuccessful installation of WinXP SP3
http://support.microsoft.com/kb/950718

WinXP SP3 - Read all prerequisites for a successful installation
http://msmvps.com/blogs/harrywaldron...tallation.aspx

Free unlimited installation and compatibility support for WinXP SP3 was
available from 14 April 2008 thru May 2009. Such support will cost you
US$59 per incident now. [You snooze, you lose.]


Dellphinus wrote:
> PA Bear,
>
> Machine has had SP2 installed for a long time, I just installed the
> latest
> updates to it (I think there was only one Security update outstanding on
> it).
>
> "PA Bear [MS MVP]" wrote:
>> If you only just now got around to getting WinXP SP2 installed, you
>> haven't
>> installed ANY critical security updates since October 2006 so there's no
>> WAY you could trust the security of the computer (or your data) now,
>> despite what anyone at GeekstoGo told you.
>>
>> And there's no way any anti-virus application would be working on a WinXP
>> SP1 computer either.
>>
>>
>> Dellphinus wrote:
>>> PA Bear,
>>> Can you elaborate? This computer was just given a clean bill of health
>>> at
>>> the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee
>>> Enterprise.
>>> What nastie does this?
>>>
>>> "PA Bear [MS MVP]" wrote:
>>>> See...
>>>>
>>>> Help: I Got Hacked. Now What Do I Do?
>>>> http://technet.microsoft.com/en-us/l.../cc700813.aspx
>>>>
>>>> Back-up any personal data (none of which should be considered 100%
>>>> trustworthy at this point) then format the HDD & do a clean install of
>>>> Windows. Please note that a Repair Install (AKA in-place upgrade) will
>>>> NOT
>>>> fix this!
>>>>
>>>> HOW TO do a clean install of WinXP: See
>>>> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1
>>>> in
>>>> http://support.microsoft.com/kb/978307
>>>>
>>>> After the clean install, you'll have the equivalent of a "new computer"
>>>> so
>>>> take care of everything on the following page before otherwise
>>>> connecting
>>>> the machine to the internet or a local network (i.e., other computers)
>>>> and
>>>> before using a flash drive or SDCard that isn't brand-new or hasn't
>>>> been
>>>> freshly formatted:
>>>>
>>>> 4 steps to help protect your new computer before you go online
>>>> http://www.microsoft.com/security/pypc.aspx
>>>>
>>>> Other helpful references include:
>>>>
>>>> HOW TO get a computer running WinXP Gold (no Service Packs) fully
>>>> patched
>>>> (after a clean install)
>>>> http://groups.google.com/group/micro...5afa8ed33e121c
>>>>
>>>> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after
>>>> a
>>>> clean install)
>>>> http://groups.google.com/group/micro...66ae41add7dd2b
>>>>
>>>> Tip: After getting the computer fully-patched, download/install
>>>> KB971029
>>>> manually: http://support.microsoft.com/kb/971029
>>>>
>>>> NB: Any Norton or McAfee free-trial that came preinstalled on the
>>>> computer
>>>> when you bought it will be reinstalled (but invalid) when Windows is
>>>> reinstalled. You MUST uninstall the free-trial and download/run the
>>>> appropriate removal tool before installing any updates, Windows Service
>>>> Packs or IE upgrades and before installing your new anti-virus
>>>> application
>>>> (which will require WinXP SP3 to be installed).
>>>>
>>>> Norton Removal Tool
>>>>
>>>> ftp://ftp.symantec.com/public/englis...moval_Tool.exe
>>>>
>>>> McAfee Consumer Products Removal Tool
>>>>
>>>> http://download.mcafee.com/products/...tches/MCPR.exe
>>>>
>>>> Also see:
>>>>
>>>> Steps To Help Prevent Spyware
>>>> http://www.microsoft.com/security/spyware/prevent.aspx
>>>>
>>>> Steps to Help Prevent Computer Worms
>>>> http://www.microsoft.com/security/worms/prevent.aspx
>>>>
>>>> Avoid Rogue Security Software!
>>>> http://www.microsoft.com/security/antivirus/rogue.aspx
>>>>
>>>> If these procedures look too complex - and there is no shame in
>>>> admitting
>>>> this isn't your cup of tea - take the machine to a local, reputable and
>>>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
>>>> shop.
>>>> --
>>>> ~Robear Dyer (PA Bear)
>>>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>>>
>>>>
>>>> Dellphinus wrote:
>>>>> Correction- clicking CANCEL brings up the context menu. CLicking OK
>>>>> generates File Not Found.
>>>>>
>>>>> "Dellphinus" wrote:
>>>>>
>>>>>> Just installed latest updates for SP2 in prep for SP3 install.
>>>>>> After the install, any time I right click on C:\ in My COmputer or
>>>>>> Windows
>>>>>> Explorer, I get the windows Installer. "The feature you are trying
>>>>>> to
>>>>>> install is on a CD-ROM or other removable disk that is not avaliable.
>>>>>> Insert the " disk and click OK. "Use Source" option box has then
>>>>>> numeral
>>>>>> 1 in it. Clicking OK after clearing the Use Source box results in the
>>>>>> right click context menu coming up withj no apparent ill effects.
>>>>>>
>>>>>> System information (complements of a previous encounter with Mr.
>>>>>> Stanley
>>>>>> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service
>>>>>> Pack
>>>>>> 2
>>>>>> Dell DImension 4500, Intel processor
>>>>>> Microsoft Genuine Advantage Diagnostic Results ALL Passed
>>>>>> MGA Diagnostics Report
>>>>>> Diagnostic Report (1.9.0019.0):
>>>>>> -----------------------------------------
>>>>>> WGA Data-->
>>>>>> Validation Status: Genuine
>>>>>> Validation Code: 0
>>>>>>
>>>>>> Cached Validation Code: N/A
>>>>>> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG
>>>>>> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w=
>>>>>> Windows Product ID: 55277-OEM-2141875-62038
>>>>>> Windows Product ID Type: 3
>>>>>> Windows License Type: OEM System Builder
>>>>>> Windows OS version: 5.1.2600.2.00010300.2.0.hom
>>>>>> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3)
>>>>>> Is Admin: Yes
>>>>>> TestCab: 0x0
>>>>>> WGA Version: Registered, 1.9.9.1
>>>>>> Signed By: Microsoft
>>>>>> Product Name: N/A
>>>>>> Architecture: N/A
>>>>>> Build lab: N/A
>>>>>> TTS Error: N/A
>>>>>> Validation Diagnostic: 025D1FF3-230-1
>>>>>> Resolution Status: N/A
>>>>>>
>>>>>> WgaER Data-->
>>>>>> ThreatID(s): N/A
>>>>>> Version: N/A
>>>>>>
>>>>>> WGA Notifications Data-->
>>>>>> Cached Result: N/A, hr = 0x80070002
>>>>>> File Exists: No
>>>>>> Version: N/A, hr = 0x80070002
>>>>>> WgaTray.exe Signed By: N/A, hr = 0x80070002
>>>>>> WgaLogon.dll Signed By: N/A, hr = 0x80070002
>>>>>>
>>>>>> OGA Notifications Data-->
>>>>>> Cached Result: N/A, hr = 0x80070002
>>>>>> Version: N/A, hr = 0x80070002
>>>>>> OGAExec.exe Signed By: N/A, hr = 0x80070002
>>>>>> OGAAddin.dll Signed By: N/A, hr = 0x80070002
>>>>>>
>>>>>> OGA Data-->
>>>>>> Office Status: 100 Genuine
>>>>>> Microsoft Office Professional Edition 2003 - 100 Genuine
>>>>>> OGA Version: Registered, 2.0.48.0
>>>>>> Signed By: Microsoft
>>>>>> Office Diagnostics:
>>>>>> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005
>>>>>>
>>>>>> Browser Data-->
>>>>>> Proxy settings: N/A
>>>>>> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
>>>>>> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
>>>>>> Download signed ActiveX controls: Prompt
>>>>>> Download unsigned ActiveX controls: Disabled
>>>>>> Run ActiveX controls and plug-ins: Allowed
>>>>>> Initialize and script ActiveX controls not marked as safe: Disabled
>>>>>> Allow scripting of Internet Explorer Webbrowser control: Disabled
>>>>>> Active scripting: Allowed
>>>>>> Script ActiveX controls marked as safe for scripting: Allowed
>>>>>>
>>>>>> File Scan Data-->
>>>>>>
>>>>>> Other data-->
>>>>>> Office Details:
>>>>>> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel
>>>>>> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2"
>>>>>> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell
>>>>>> System,Dell
>>>>>> Computer,Dell System,Dell
>>>>>> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
>>>>>> Standard
>>>>>> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product
>>>>>> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft
>>>>>> Office Professional Edition
>>>>>> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App
>>>>>> Id="15" Version="11" Result="100"/><App Id="16" Version="11"
>>>>>> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19"
>>>>>> Version="11" Result="100"/><App Id="1A" Version="11"
>>>>>> Result="100"/><App
>>>>>> Id="1B" Version="11" Result="100"/><App Id="44" Version="11"
>>>>>> Result="100"/></Applications></Office></Software></GenuineResults>
>>>>>>
>>>>>> Licensing Data-->
>>>>>> N/A
>>>>>>
>>>>>> Windows Activation Technologies-->
>>>>>> N/A
>>>>>>
>>>>>> HWID Data-->
>>>>>> N/A
>>>>>>
>>>>>> OEM Activation 1.0 Data-->
>>>>>> BIOS string matches: yes
>>>>>> Marker string from BIOS: 145B4ell Inc|19CC0:GENUINE C&C
>>>>>> INC|145B4:Microsoft Corporation
>>>>>> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell
>>>>>> System,Dell
>>>>>> System
>>>>>>
>>>>>> OEM Activation 2.0 Data-->
>>>>>> N/A
>>>>
>>>> .
>>
>> .